GitLab vulnerabilities
1,178 CVEs and advisories name GitLab as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-8977Server-Side Request Forgery (SSRF) in GitLab
- CVE-2024-9596Inclusion of Sensitive Information in Source Code in GitLab
- CVE-2024-9623Incorrect Authorization in GitLab
- CVE-2023-3441Exposure of Sensitive Information Due to Incompatible Policies in GitLab
- CVE-2024-4099Improper Encoding or Escaping of Output in GitLab
- CVE-2024-8974Incorrect Provision of Specified Functionality in GitLab
- CVE-2024-4278Incorrect Synchronization in GitLab
- CVE-2024-4283URL Redirection to Untrusted Site ('Open Redirect') in GitLab
- CVE-2024-6685Authorization Bypass Through User-Controlled Key in GitLab
- CVE-2024-8311Improper Protection of Alternate Path in GitLab
- CVE-2024-4472Insertion of Sensitive Information into Log File in GitLab
- CVE-2024-6678Authentication Bypass by Spoofing in GitLab
- CVE-2024-8641Privilege Context Switching Error in GitLab
- CVE-2024-8631Privilege Defined With Unsafe Actions in GitLab
- CVE-2024-8754External Control of Critical State Data in GitLab
- CVE-2024-8635Server-Side Request Forgery (SSRF) in GitLab
- CVE-2024-2743Incorrect Authorization in GitLab
- CVE-2024-4612URL Redirection to Untrusted Site ('Open Redirect') in GitLab
- CVE-2024-4660Missing Authorization in GitLab
- CVE-2024-5435Generation of Error Message Containing Sensitive Information in GitLab
- CVE-2024-6446Business Logic Errors in GitLab
- CVE-2024-6389Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
- CVE-2024-8124Inefficient Regular Expression Complexity in GitLab
- CVE-2024-8640Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
- CVE-2024-3127Improper Access Control in GitLab
- CVE-2024-6502Incorrect Provision of Specified Functionality in GitLab
- CVE-2024-7110Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
- CVE-2024-8041Uncontrolled Resource Consumption in GitLab
- CVE-2024-2800Uncontrolled Resource Consumption in GitLab
- CVE-2024-3035Authorization Bypass Through User-Controlled Key in GitLab